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TO "MLNI-MARKMAN" CLAIMS) 



MICROSOFT CORPORATION'S PATENT LOCAL 
RULE 4-2 DISCLOSURE (LIMITED TO "MINI- 
MARKMAN" CLAIMS), CASE No. C 01-1640 SBA 



1 I Pursuant to Patent Local Rule 4-2 and this Court's Order, entered November 5, 2002, 

2 I Defendant Microsoft Corporation ("Microsoft") hereby serves its "Disclosure Of Preliminary 

3 I Claim Construction And Extrinsic Evidence/' limited to the twelve selected "Mini-Markman" 
4. 1 patent claims. Microsoft's preliminary claim construction is based upon the proposed terms, 

5 I phrases and clauses, and claims as a whole, identified by the parties in their submissions in 

6 I accordance with Patent Local Rule 4-1 (a) and conference in accordance with Patent Local Rule 4- 

7 J Kb). 

8 I Microsoft provides its preliminary claim construction of each of the 12 "Mini-Markman" 

9 I claims subject to the limitations and reservations of rights set forth herein. Mifcrosoft does not 

10 I waive any defenses that the asserted claims fail to satisfy the provisions of 35 U.S.C § 1 12 

1 1 I including, for example, the written description requirement, the definiteness requirement, or any 

1 2 I other requirement for patentability. Microsoft does not concede that the asserted claims are 

1 3 I supported by Plaintiffs original application or any application from which they purportedly claim 

14 J priority. Specifically, by offering a construction of a term, Microsoft does not waive any defense 

1 5 I that the claim is in fact indefinite and there can be no proper construction. 

16 I Microsoft provides its preliminary claim construction in the following format Exhibit A 

1 7 I sets forth Microsoft's preliminary construction of (1) the claim term "virtual distribution 

1 8 I environment" ("VDE"), (2) the "VDE invention" disclosed in the February, 1995, InterTrust 

19 I patent application, and (3) certain other claim terms. Exhibit B sets forth Microsoft's preliminary 

20 I construction of the disputed claims as a whole, and particular claim phrases in dispute, in the 

21 I order of appearance in a claim. Where an individual claim term (within a phrase) is also in 

22 I dispute, it will be bold-faced in Exhibits A and B. Exhibit C sets forth Microsoft's preliminary 

23 I construction of the individual terms in dispute, in alphabetical order. 

24 I Microsoft reserves the right to modify its preliminary claim constructions in the event that 

25 I the parties are unable to agree upon a particular claim construction. Furthermore, because 

26 I InterTrust has not yet fully complied with the disclosure requirements of Patent Local Rules 3-1 

27 I and 3-2, Microsoft expressly reserves the right to amend its preliminary claim construction if 
28 
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evidence becomes available through those disclosures (or that should have been provided therein) 
that would support amended constructions. Microsoft further reserves the right to amend its 
preliminary claim constructions once it has an opportunity to review InterTrust's preliminary 
claim constructions and once the parties have further met and conferred as required. 

Preliminary Identification of Evidence in Support of Claim Construction 
Microsoft's preliminary claim construction is supported by the intrinsic record of the 
seven U.S. patents from which the 12 "Mini-Markman" claims are selected. For the purposes of 
submission of this preliminary claim construction only, Microsoft treats the "intrinsic" evidence 
as including: 1) the specifications of each of the seven U.S. patents at issue in the "Mini- 
Markman" proceeding, including any material purportedly incorporated by reference therein; 
2) the prosecution history of each of the seven patents at issue, including the applications and 
prosecution history of the seven patents and any related patent applications, including without 
limitation, applications purportedly, incorporatedby reference or to which an application claimed 
priority; and 3) all references cited in the prosecution of any such applications. In accordance 
with the local rules, this evidence is not specifically identified, except to the extent that Microsoft 
asserts particular sections of a patents' specifications provide "structure" for claims properly 
construed under 35 U.S.C. § 1 12(6). 

In certain circumstances, Microsoft's preliminary construction may be supported by 
extrinsic evidence presently available to Microsoft. Microsoft reserves the right to modify or 
supplement with evidence that it has not yet been able to fully review, due to InterTrust's 
production, including without limitation, InterTrust re-production of over 1,000,000 pages on 
November 4, 2002. Microsoft reserves the right to supplement with additional evidence gathered 
n the course of the discovery collected between now and the close of "claim construction" 
liscovery or later submitted by InterTrust in full compliance with its disclosure obligations under 
>atent Local Rules 3-1 and 3-2. Extrinsic evidence is identified or produced in accordance with 
he local rule and set forth in the following exhibits: 
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Exhibit D: Contains copies of excerpts from dictionaries and other publications. Due to 
the volume of the appended pages, Exhibit D will be served via Federal Express. 

Exhibit E: Contains a list of selected production documents, identified by initial bates 
number. - 

Exhibit F: Contains a list of selected, uncited prior art publications, identified by bates 
numbers). 

Exhbit G: Contains a list of selected, uncited prior art patents, identified by bates 
iumber(s). 

In addition to the extrinsic evidence cited in Exhibits D-G, Microsoft iAcorporates by 
eference herein and reserves the right to rely upon: 1 ) all documents identified by InterTrust in 
-esponse to discovery or pursuant to the Patent Local Rules; 2) all InterTrust patents, 
judications and other things that are prior art to any Mini-Markman claim; and 3) the testimony 
>f InterTrust and the witnesses identified below. 

Preliminary Identification of Witnesses 1 
Professor John Mitchell: Dr. Mitchell will testily of the following matters: 

1 ) that certain of the presently disputed terms and phrases used in the twelve claims are 
morphous terms lacking a well-defined, precise meaning that can accurately be gleaned from 
echnical or other dictionaries. Rather, these terms are used in the art and/or in the patents in a 
lanner that requires close consideration of the entire patent specification to put them in proper 
ontext and determine their precise, correct meaning as used in the patents. These terms include 
secaraxontairies^ "secure," 
securely/' "security," 'Virtual distribution environment"; 

2) that the concepts stated in the InterTrust patents were known to the art, including the 
ited prior art, which cited art he will describe; 



In accordance with the local rules, Microsoft identifies witness testimony that it contends will 
jpport its construction. It has not identified herein testimony relevant to the ''tutorial" to be held 
rior to the claim construction hearing. 
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3) the level of skill, background, and understanding (including extent thereof) of the 
relevant patent application disclosures by a person of skill in the art; and 

4) the meaning and scope certain disputed claim language, including "secure container," 
'control," "govern," "protect," "protected processing environment," "secure," "securely," 
'security," and "virtual distribution environment" 

Professor David Maier: Dr. Maier will testify on the following matters: 

i 

1 ) what the February 1 3, 1 995, patent application (SN 08/388,1 07) and the seven 
nterTrust patents, described as the "invention;" more particularly, what are the required, 
tecessary, non-optional features of the "VDE" "invention" as stated in the patents. This 
lescription will include an explanation of the features set forth in Microsoft's "Global 
Constructions" (Exhibit A). 

2) what the February 13, 1995, patent application (SN 08/388,107) and the seven 
nterTrust patents, required as necessary, non-optional building blocks to implement the "VDE" 
invention" as stated in.the patents. 
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DECLARATION OF SERVICE BY E-MAIL 
I am more than eighteen years old and not a party to this action. My place of employment 
and business address is 121 S.W. Salmon St., Suite 1600, Portland, OR 97204. 

On December 20, 2002, at 3:00 p.m., I served on counsel for InterTrust Technologies 
Corporation: 

MICROSOFT CORPORATION'S PATENT LOCAL RULE 4-2 
DISCLOSURE OF PRELIMINARY CLAIM CONSTRUCTION AND 
EXTRINSIC EVIDENCE (LIMITED TO "MIM-MARKMAN" CLAIMS) 

by email delivery to: 



Michael H. Page, Esq. 
John W. Keker, Esq. 
Jon B. Streeter, Esq. 
Keker & Van Nest, LLP 
710 Sansome Street 
San Francisco, CA 94111 
Telephone: 415-391-5400 
Facsimile: 415-397-7188 
Email: mhp@kvn.com 



Douglas Derwin 

InterTrust Technologies Corporation 
4800 Patrick Henry Drive 
Santa Clara, CA 95054 
Telephone: 408-855-0100 
Facsimile: 408-855-0144 
Email: dderwin@intertrust. com 



Steven H. Morrissett, Esq. 
Finnegan Henderson Farabow 

Garrett & Dunner 
Stanford Research Park 
700 Hansen Way 
Palo AJtoCA 94304-1016 
Telephone: 202-408-4000 
Facsimile: 202-408-4400 
Email: steven.morrissett@finnegan.com 



I declare under penalty of perjury that the foregoing is true and correct 
Executed on December 20, 2002, at Portland, Oregon. 




(SIGNATURE) 



IRE) \ 



land, 



(PRINT NAME) 
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Construction 


special-purpose, executable VDE control(s). A VDE control can execute only within a Secure Processing Environment. Each VDE control is a component 
assembly dedicated to a particular activity (e.g., editing, modifying another control, a user-defined action, etc.), particular user(s), and particular protected 
information. Each separate information access or use is independently controlled by independent VDE control(s). Each VDE control is assembled, within a 
Secure Processing Environment, from independently deliverable modular components (e.g., load modules or other controls), dynamically in response to an 
information access or use request. The dynamic assembly of a control is directed by a "blueprint" record (put in place by one or more VDE users) containing 
control Information identifying the exact modular code components to be assembled and executed to govern this particular activity on this particular 
information by this particular user(s). Each control is independently assembled, loaded and delivered vis-a-vis other controls. Control information and controls 
are extensible and can be configured and modified by all users, and combined by all users with any other VDE control information or controls (including that 
provided by other users), subject only to "senior" user controls. Users can assign control Information and controls to an arbitrarily fine, user-defined portion of 
the protected information, such as a smgle paragraph of a document, as opposed to being limited to file-based controls. VDE controls reliably limit use of the 
protected information to authorized activities and amounts. 


a vuii secure container is a selt-contained, self-protecting data structure which (a) encapsulates information of arbitrary size, type, format, and organization 
including other, nested, containers, (b) cryptographicaUy protects that information from all unauthorized access and use, (c) provides encrypted storage 
management functions for that information, such as hiding the physical storage location(s) of its protected contents, (d) permits the association of itself or its 
contents with controls and control information governing access to and use thereof, and (e) prevents such use or access (as opposed to merely preventing 
decryption) until it is opened. A secure container can be opened only as expressly allowed by the associated VDE control(s), only within a Secure Processing 
Environment, and only through decryption of its encrypted header. A secure container is not directly accessible to any non-VDE calling process. All such calls 
are intercepted by VDE. The creator of a secure container can assign (or allow others to assign) control information to any arbitrary portion of a secure 
container's contents, or to an empty secure container (to govern the addition of contents to the secure container, and access to or use of those contents). A 
container is not a secure container merely because its contents are encrypted and signed. A secure container is itself secure. All VDE-protected information 
(including protected content, infonnation about content usage, content-control information, controls, and load modules) is encapsulated within a secure 
container whenever stored outside a Secure Processing Environment or secure database. 


VDE is non-circumventable (sequestered). It intercepts all attempts by any and all users, processes, and devices, to access or use (e.g., observe, interfere with, or 
remove) protected information, and prevents all such attempts other than as allowed by execution of (and satisfaction of all requirements imposed by) associated 
VDE controls within Secure Processing Environments). 


VDE is peer-to-peer. Each VDE node has the innate ability to perform any role identified in the patent application (e.g., end user, content packager, distributor, 
clearinghouse, etc.), and can protect information flowing in any direction between any nodes. VDE is not client-server. It does not pre-designate and restrict ' 
one or more nodes to act solely as a "server" (a provider of information (e.g., authored content, control infonnation, etc.) to other nodes) or "client" (a requestor 
of such information). All types of protected-content transactions can proceed without requiring interaction with any server. 


VDE comprehensively governs all secnrity and commerce activities identified in the patent application, including (a) metering, budgeting, monitoring, reporting, 
and auditing information usage, (b) billing and paying for information usage, and (c) negotiating, signing and enforcing contracts that establish users* rights to 
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1 . RtUaUy Uoliiiiug «nd enforcing the conditions and requirements under which an action that otherwise absolutely cannot be taken, will be allowed 

™ !• ° CCUr ' niT satisfaction of 111086 ««"«»«» ■»» dements, the action cannot be taken by any user, process 
or device. In VDE, an action is controlled through execution of the applicable VDE centres) within a VDE Secure Processing Environment. 

2. More specifically, in VDE, controlling is effected by use of VDE controls, VDE secure containers, and VDE foundation (includmg VDE Secure 
Processing Environment, object registration." and other mechanisms for allegedly individually ensuring that specific controls are enforced vis-a-vis 
specific objects (and their content at an arbitrary granular level) and specific "users.") 

J . . i 1 ■ ■! 1 


* «.».uu m« wmcu nas oca copied at least once, not the copy itself'. A "copy" is what is formed by a copying operation, and It may or fiay not be 
encrypted, ephemeral, usable, or accessible. - 7 

J— L " — 


> ™»V'™* » »'B»»i «« or omer complete pnysical Woclc ot data trom one location on a storage medium to another location on the same or different 
storage medium, leaving the original block of data unchanged, such that two distinct and independent objects exist Although the layout of the data 
values in physical storage may differ from the original, the resulting "copy" is logically indistinguishable from the original. The resulting "copy" may or 
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may noi oe encrypted, ephemeral, usable, or accessible. — — — 

A VDE control which controls some access to or use ofaconv ■ — 


[This shall be construed in connection with a disputed claim phrase.] — 
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1 1 *u» shall be consmied m connection wim a disputed claim phrase.] — — — 

^— < ■■ — — 


i oc generic name ror a group ot device types, r or example, all display stations belong to the same device class. A device class is Afferent fiom a 

device type. A device type is composed of all devices that share a common model number or family (e.g. IBM 433 1 printers). 


a static unit ot storage allocated by a "file system" and containing digital information. A digital tile enables any application using the "file" system" to 
randomly access its contents and to distinguish it by name from every other such unit A copy of a digital file is a separate digital file (A "file system" 
is the portion of the operating system that translates requests made by application programs for operations on "files" into low-level tasks that can control 
storage devices such as disk drives.) 


aigitai signature: An untorgabie stnng ot characters (e.g., bits) generated by a cryptographic transformation to a block of data using some secret, which 
stnng can be generated only by an agent that knows the secret, and hence provides evidence that the agent must have generated it 
digitally signing: Creating a digital signature using a secret key. (In symmetric key cryptography, a "secret key" is a key that is known only to the 
sender and recipient In asymmertric key cryptography, a "secret key" is the private key of a public/private key pair, in which the two keys are related 
uniquely by a predetermined mathematical relationship such that it is coraputationaliy infeasible to determine one from the other ) 


entity; Any person or organization. j 
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r ptwcssor ™ ssame PfV«^ * em °ry into which data and executable code can be loaded, which is assigned to a single executing 
process while that process is actively executing. Memory holding "swapped out" processes or executab.es isVot part of an -^cudonlS 2 ^^ 
execution space identifier: A value that uniquely identifies a particular execution space. 

[This shall be construed in connection with a disputed claim Dhras/TT ~" - — 


govern, governing, governed: See control (v.) — — 

governed item: Information, of arbitrarily fine granularity, whose access and use by any user, process, or device which is controUed. 


o lupping execution oi a running (executing) process unconditionally (i.e., without providing any specific condition for resumption). For example 
executing an instruction known as a "breakpoint halt instruction." 


« jessing environmem wunin a vuu; node which is not a Secure Processing Environment. A "host processing environment" mVy ifiheTbe" 

secure or not secure. A secure" host processing environment is a self-contained protected processing environment formed by loaded, 
executable programming executing on a general purpose CPU (not a Secure Processing Unit ) running in protected (privileged) mode. A "non- 
secure host processmg environment is formed by loaded, executable programming executing on a general purpose CPU (not a Secure Processing 
Unit) runmng m user mode. • 
— ™— 1 -. i 
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identify: To establish as being a particular instance of a person or thing. 


<wun respect to a digital me, control, authorization information, Secure Processing Environment, descriptive data structure, element, load 
module, header, or secure container); Physically storing within, as opposed to addressing. 
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A data structure that is a collection of helds (elements), each with its own name and type. Unlike an array, whose elements are accessed' using an Index 
the elements of a record are accessed by name. A record can be accessed as a collective unit of elements, or the elements can be accessed individually. ' 


conaiuoa wiinoui wnicn an action cannot occur. A required condiUon acts prospectively - It does not apply to a description created at or after the 
creation of the object to which it applies, 


t\ record containing control information, which record is stored and acted upon within a processing environment. 


A lexical sxaicmem ihai siaies a condinon under which access to or use of VDE-protected data will be allowed fey a VDE control. A rule may specify ' 
how, when, where, and by whom a particular activity on particular information is to be allowed. 


a sune in wmcn au users oi a system are guaranteed that all information, processes, and devices within the system, shall have their availabUity secrecy' 
Integrity and authenticity maintained against all of the identified threats thereto. "Availability" means the property that infonnation is accessible and ' 
usable upon demand by authorized persons, at least to the extent that no user may delete the information without authorization. "Secrecy," also 
referred to as confidentiality, means the property that information (including computer processes) is not made available or disclosed to unauthorized 
persons or processes. "Integrity" means the property that information has not been altered either intentionally or accidentally. "Authentic! rv" m»n« th» 
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ucccuung coae in a secure execution space to act upon some information, in a manner that ensures that the Information and tlie processing remain 

secure. ° 


rvcscivmg ojgiuu iniormanon m a secure container, as part of a communication encrypted on the communications level, at a Secure Processing 
Environment authenticated in accordance with VDE controls associated with the secure container. 


bee secure. — — ■ — 


nn oracrea measure or me aegree oi security, ihe "secunty level" is persistent unless expressly noted to exist onJy some of the time. Also, the 
combination of a hierarchical classification and a set of nonhierarchical categories that represents the sensitivity of an object or the clearance of a 
subject. For example, Unclassified, Confidential, Secret, and Top Secret are hierarchical classifications, whereas NATO and NOFORN are non- 
hierarchical categories defined by the DoD Trusted Computing guidelines. 


I i nis will be construed in connection with disputed claim phrases] 


tamper resistance: i ne ability oi a tamper resistant barrier to prevent access, observation, and interference with information or processing 
encapsulated by the barrier. 
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^ouu uis ucaieu, iiiudiiied, or selected by a user to control a particular use or access by the user to particular" protected informaUon, 

The state m which authenticated data conforms to predetennined completeness and consistency parameters, ~ 

See Global Construction of VDE. ~ ~" "~ ' 
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EXHIBIT D 

Appended hereto, in accordance with Patent Local Rule 4-2(b), are copies of excerpts of 
dictionary definitions and other publications. 
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The New IEEE Standard Dictionary of 
Electrical and Electronic Terms (IEEE 100- 
1992), 1993, ISBN 1-55937-240-0 
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The Whole Internet: User's Guide and Catalog 
(O'Reilly & Associates, Inc) ISBN 1-56592- 
0252 
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Practical Unix Security (O'Reilly & 
Associates, Inc) ISBN 0-93717-5722 


4 


Computer Security Basics, Deborah Russell 
and G.T. Gangemi Sr. (O'Reilly & Associates, 
1991) ISBN 0-93717-5714 


5 


Modem Methods for Computer Security and 
Privacy, Lance J. Hoffman (Prentice Hall, 
1977) ISBN 0-13-595207-7 
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Distributed Systems, Second Edition, Sape 
Mullender (Addison Wesley, 1993) ISBN 0- 
20162-4273 
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Formal Models for Computer Security, Carl E 
Landwehr, ACM Computer Surveys, 
September 3, 1981 pg 247-275 


8 


Computer & Communications Security: 
Strategies for the 1990's, James Arlin Cooper 
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The Computer Security Handbook, Richard 
Baker (TAB Professional and Reference 
Books, 1985) ISBN 0-83060-3085 


10 


Computer Security Handbook 2 nd Edition, Hutt, 
Bosworth, Hoyt (1987) ISBN 002915300X 


11 


National Information System Security 
(INFOSEC) Glossary, NSTISSI No. 4009, 
September 2000 


12 


Telecommunications: Glossary of 
Telecommunications Terms by Nation 
Communications Systems, 1996. 


13 


Internet Security Glossary, Network Working 
Group, RFC 2828, May 2000 
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Que's Computer User's Dictionary (1994) 
ISBN 1-56529-1255 
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The Dictionary of Computing and Digital 
Media: Terms and Acronyms, Brad Hansen 
(1999) ISBN 1-887902-38-4 
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Dictionary of Scientific and Technical Terms, 
5* ed. (McGraw-Hill, 1994) ISBN 0-07- 
042333-4 
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The Computer Glossary: The Complete 
Illustrated Desk Reference, Alan Freedman 
(Computer Language Co., 1993) ISBN 0-8144- 
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Prentice Hall's Illustrated Dictionary of 
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Computer Related Risks, Peter G. Neumann 
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and Technology, Phillip A. Laplante (2001) 
ISBN 0-84932-6915 
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The American Heritage Dictionary of the 
English Language (1969) Standard Book 
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Webster's New World Dictionary of Computer 
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Dictionary of Computing, Third Edition 
(Oxford, 1990) ISBN 0-19-853825-1 
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1973 
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Newton's Telecom Dictionary, Harry Newton 
93644-8872 
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Tony Gunton, A Dictionary of Information 
Technology and Computer Science, Second 
Edition (NCC Blackwell Ltd 1993). ISBN 1- 
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Dictionary of Computer Science, Engineering 
ISBN 0-84932-6915 
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Unix System Security, Wood, Kochan (Hayden 
81046-2672 


31 
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Press, 1994) ISBN 1-55615-597-2 


32 


Microsoft Computer Dictionary, Third Edition 
( 1 997) ISBN 1-5723 1 -446 -X Paperback 
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jj 


ocuLiJiiy in i^uiiipuiing, v^jidiicb r . .riiccgci 
(Prentice Hall, 1989JJ)- 13798-9431 


34 
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Standards and Terms, Dennis Longley, Michael 
Shain and William Caelli (Stockton Press, 
1992) ISBN 1-56159-069-X or 0-333-54698-9 
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Language: College Edition, 1968 
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Dictionary of Object Technology: The 
Definitive Desk Reference, Donald G Firesmith 
and Edward M Eykholt (SIGS Book, 1995) 
ISBN 1-88484-2097 


37 


Webster's Ninth New Collegiate Dictionary, 
Merriam- Webster, 1987, ISBN 0-87779-508-8 


38 


Fundamentals of Database Systems, Ramez 
Elmasri and Shamkant B. Navathe 
(Benjamin/Dummings Publishing Company, 
1989) ISBN 0-80530-1453 


39 


IBM Dictionary of Computing, George 
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McDaniei (McGraw Hill, 1994) ISBN 0-07- 
031488-8 (hardcover) 0-07031-4896 
(paperback) 
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Encyclopedia of Computer Science and 
Engineering, 2 nd Edition (Van Nostrand 
Reinhold Company, 1983) ISBN 0-4423- 
24496-7 
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